Skip to content

GitLab

  • Menu
Projects Groups Snippets
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • lemonldap-ng lemonldap-ng
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 329
    • Issues 329
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 12
    • Merge requests 12
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Packages & Registries
    • Packages & Registries
    • Container Registry
  • Analytics
    • Analytics
    • Value stream
    • CI/CD
    • Repository
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • LemonLDAP NG
  • lemonldap-nglemonldap-ng
  • Issues
  • #2066

Closed
Open
Created Jan 13, 2020 by Mehdi KHELIFA@mek

[SAML] Lasso Error Code -201

Concerned version

Version: %2.0.7

Platform: (Apache)

Summary

Some SAML Service providers are not working. I suppose it's related to some consistency issue with the Service Provider Metadatas. But LL:NG should have shown an error when I register the SP. Even with the IdpInitiated option enable, I'm still facing the same error page (An error occured during SAML single sign on) with SAMLRequest in the URL

Logs

[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Start routing saml
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing _forAuthUser
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Cleaning pdata
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing importHandlerData
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing controlUrl
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing code ref
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Launching ::Password::AD::_modifyPassword
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Processing code ref
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] URL /saml/singleSignOn?SAMLRequest=fZBPS8QwEEe/Ssm96R8r4rAtVHspWJXdxQUvEmpoA2kSMxOrfnrb7mW9eJ/3fo/ZoZi0gzrQaPbyI0ik6EV6VNaULOcpi9qmZMfPxrann/eQdvqtywj3eNJ38eQoXg4Qg2wNkjC0MGmexmkWZ1fH7AaKHIpbXmTXryxqFrcygjb1SOQQkkQswxzRcvLCKc17OyVrUoLKDFoe1GCeDIu+Jm0QttaSBW/AClQIRkwSgXo41N0DLLngvCXbW82q3XoNW5y/4P/HBaL0ayGr5nnmTgcvNKphpLVsl1w4zwMOHhdJ2zxbrfrvqNbazvdeCpIlIx8kS6oz9ffH1S8=&RelayState=Mm8KXJVTHxsXILwo5249LfEIUilR3K&SigAlg=http://www.w3.org/2001/04/xmldsig-more#rsa-sha256&Signature=jSikuUYKncp76e03j8BS+DFYcvwxzg0ZRvjYy/IDJCMQWP8Rm49bfJ6lZIAjCL4Kih2xGVKuDxrksodYdlDLTN4cFEdu8vXH/EX8LE2z4dFhgqBgaxRVo6Nu4Ac4GAGUbx++X72joTDoLfO5OOfg9bfU6sW6EnmwMNHp3DKU1v1ebi8vq+eMHZLW9Fwrg2IWyeJSLMqVtO0J/uKKzDorTcQlDSkKfCD5/NxNsPGQeR/FUb1nAczzKgVZpYpqrOS5/gn78vQUjlseVIvnJ5+rDcpP1PymI8S33Lv4LtsRdI/FnoFnZbrcQJbqL9OmYvWr26dsDEbydw7EogKajpvc8Q== detected as an SSO request URL
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] SAML method: HTTP-REDIRECT
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] HTTP-REDIRECT: SAML Request SAMLRequest=fZBPS8QwEEe%2FSsm96R8r4rAtVHspWJXdxQUvEmpoA2kSMxOrfnrb7mW9eJ%2F3fo%2FZoZi0gzrQaPbyI0ik6EV6VNaULOcpi9qmZMfPxrann%2FeQdvqtywj3eNJ38eQoXg4Qg2wNkjC0MGmexmkWZ1fH7AaKHIpbXmTXryxqFrcygjb1SOQQkkQswxzRcvLCKc17OyVrUoLKDFoe1GCeDIu%2BJm0QttaSBW%2FAClQIRkwSgXo41N0DLLngvCXbW82q3XoNW5y%2F4P%2FHBaL0ayGr5nnmTgcvNKphpLVsl1w4zwMOHhdJ2zxbrfrvqNbazvdeCpIlIx8kS6oz9ffH1S8%3D&RelayState=Mm8KXJVTHxsXILwo5249LfEIUilR3K&SigAlg=http%3A%2F%2Fwww.w3.org%2F2001%2F04%2Fxmldsig-more%23rsa-sha256&Signature=jSikuUYKncp76e03j8BS%2BDFYcvwxzg0ZRvjYy%2FIDJCMQWP8Rm49bfJ6lZIAjCL4Kih2xGVKuDxrksodYdlDLTN4cFEdu8vXH%2FEX8LE2z4dFhgqBgaxRVo6Nu4Ac4GAGUbx%2B%2BX72joTDoLfO5OOfg9bfU6sW6EnmwMNHp3DKU1v1ebi8vq%2BeMHZLW9Fwrg2IWyeJSLMqVtO0J%2FuKKzDorTcQlDSkKfCD5%2FNxNsPGQeR%2FFUb1nAczzKgVZpYpqrOS5%2Fgn78vQUjlseVIvnJ5%2BrDcpP1PymI8S33Lv4LtsRdI%2FFnoFnZbrcQJbqL9OmYvWr26dsDEbydw7EogKajpvc8Q%3D%3D
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Lasso Identity loaded
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Lasso error code -201: The identifier of a provider is unknown to #LassoServer. To register a provider in a #LassoServer object, you must use the methods lasso_server_add_provider() or lasso_server_add_provider_from_buffer().
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [error] SSO: Fail to process authentication request
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Returned error: 51 (PE_SAML_SSO_ERROR)
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Skin returned: error
[Mon Jan 13 18:42:46 2020] [LLNG:56892] [debug] Calling sendHtml with template error

Backends used

Debian 9 / Apache 2.4 / PostgreSQL 9 for Configuration and Session Storage

Possible fixes

Assignee
Assign to
Time tracking